COINES Streaming Destination Buffer Overflow

COINES SDK versions 2.0 through 2.11 can copy accumulated USB or BLE stream data into a caller-provided destination without validating its capacity. A malicious or compromised board can overflow heap or stack memory in the host application, causing denial of service or potentially arbitrary code execution.